A new vulnerability CVE-2025-22247 has been reported, affecting VMware Tools installed on VMware vSphere VMs.
Marked as a moderate-severity vulnerability with a CVSS score of 6.1, it allows attackers with non-administrative privileges on a guest VM to compromise local files, leading to insecure file operations within that VM.
Remediation for CVE-2025-22247
To address this vulnerability, a fixed version of VMware Tools 12.5.2 is now available. You can download it from this link.
Additional info can be found in the Release Notes.
Failing to patch and remediate security vulnerabilities exposes your environment to exploitation, potentially leading to data breaches, system compromise, and operational disruption.
Proactive mitigation is essential to maintaining a secure and resilient infrastructure.
